General

  • Target

    18357227985.zip

  • Size

    44.3MB

  • MD5

    d5d3438716b9bbf4afc610d8234a163d

  • SHA1

    8388534c9ef0566428e0f26c60240da466d8ff1b

  • SHA256

    671fae0ee69f23ecca722978eaf50383db898665d3957e9d61ae216c97480418

  • SHA512

    daecd39c5061a434aaecd9fea7bf655ef46f9d9318e63b4d4d8ad2ffb7478fb08fb723df1d7be2555a1054f5b941d44b1f5929f34051710e2d18870b95006a0e

  • SSDEEP

    786432:l5W2hr7D8lV9q4jxm4IyTnEEO+BDOqCZ6LEzZAb7QvBtv7R2TmaNUZc15HR7mdwY:jz8Zquxb3O+VO+4zZQQFSmaNUZkHhWwY

Malware Config

Signatures

  • Office macro that triggers on suspicious action 4 IoCs

    Office document macro which triggers in special circumstances - often malicious.

  • Suspicious Office macro 1 IoCs

    Office document equipped with macros.

  • One or more HTTP URLs in qr code identified

    Detects presence of HTTP links in QR codes.

  • Unsigned PE 36 IoCs

    Checks for missing Authenticode signature.

Files

  • 18357227985.zip
    .zip

    Password: infected

  • 4e184577b879335e1a8fdda6ff7e87bc2bdade1b6ed6432b3957b181c20ae954
    .rar
  • 4FB.Cn追踪更新.url
    .url
  • Crack/MathType.exe
    .exe windows:6 windows x86 arch:x86

    c165d946b85b6dab8273b92bb8cb5cc9


    Headers

    Imports

    Sections

  • MathType-win-zh-7.7.0.237.exe
    .exe windows:4 windows x86 arch:x86

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX (base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX (base vars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX (base).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/AMS LaTeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/AMSTeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ANGEL Learning.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ASKBOT.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ATutor.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Accord LMS.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ActivInspire.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Acuity.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Alfresco.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Alpha.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Art of Problem Solving.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Authorea.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/BSCW.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/BetterLesson.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Blackboard.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/BlankEqn.doc
    .doc windows office2003
  • $LOCALAPPDATA/Temp/mathtype.tmp/Blendspace Quiz.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Blendspace.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Bloomfire.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/BooRoo.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/BrainHoney.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/CIEXYZ.pf
  • $LOCALAPPDATA/Temp/mathtype.tmp/CMS Made Simple.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Calibri+Symbol 11.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/Calibri+Symbol 12.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/Calibri+Symbol 32.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/Chamilo.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Cinderella.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Cobocards.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Coggle.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Collaborize.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Colwiz.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Concrete.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Confluence.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Connexions.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Contao.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/CourseSites.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Coursera.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Cramberry.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Desire2Learn-LaTeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Desire2Learn-MathML.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/DigitalChalk.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Docebo.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Dokeos.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Draft.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Duxbury LaTeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ELMS.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/EZ LCMS.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Ecto.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Ed2go.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Ediscio.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Edmodo.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Edublogs Pro.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Edublogs.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Edubrite.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Edufy.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Edusite.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Elxis.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Empty.gif
    .gif
  • $LOCALAPPDATA/Temp/mathtype.tmp/EncyclopediaOfMathematics.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Etomite.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Euclid 10.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/Euclid 12.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/Euclid 48.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/EudoraOSE.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Evernote.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ExamTime.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Experts123.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Feng Office.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Fidus Writer.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/FluidSurveys.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/FreeWebClass.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Fronter.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/GRAY.pf
  • $LOCALAPPDATA/Temp/mathtype.tmp/Geek Central.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Gmail.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/GmailChatTeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/GmailTeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Google (chart api rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Google (chart api vars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Google Docs.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Google Groups.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Google Presentations.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Google Sites.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Groupsite.com.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/HTML input (chars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/HTML input.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Haiku.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Hotmail.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/HyperOffice.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ILIAS.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/JAWTAccessBridge-32.dll
    .dll windows:5 windows x86 arch:x86

    cc600014039f50aac13b9344c5ec0bc1


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/JavaAccessBridge-32.dll
    .dll windows:5 windows x86 arch:x86

    e29944e71ead1ccb0c0a4255cba87233


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/Jaws CMS.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/JoomlaLMS.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Kidblog.org.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Knotebooks.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/KwikSurveys.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LAMS.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LINEAR_RGB.pf
  • $LOCALAPPDATA/Temp/mathtype.tmp/LaTeX (base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LaTeX (base vars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LaTeX (base).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LaTeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LabArchives-LaTeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LabArchives-MathML.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LeaderTask.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Leanpub.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LearnHub.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/License.txt
  • $LOCALAPPDATA/Temp/mathtype.tmp/LifeType.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LimeService.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LiveText.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Lore.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/LucidaSansRegular.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/MHForum.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Magnolia.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Mahara.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Mambo.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MangoSpring.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Math2.org.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathBin.net.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathHelpBoards.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathJax-LaTeX (base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathJax-LaTeX (base vars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathJax-LaTeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathJax-MathML (base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathJax-MathML (base vars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathJax-MathML.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (Clipboard).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (DataObject).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (Maple).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (Mathematica).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (base vars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (m namespace).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (namespace attr).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 (no namespace).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2 M4M (base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML2base.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML3 (Clipboard).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML3 (m namespace).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML3 (namespace attr).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML3 (no namespace).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathML3 M4M (base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathOverflow.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathPage.js
    .js
  • $LOCALAPPDATA/Temp/mathtype.tmp/MathTypeLib.exe
    .exe windows:1 windows x86 arch:x86

    ed3a241dac42a4a83addde7d49b9eadb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/MentorMob.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Mind42.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Mobomath.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Moodle-TeX filter.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Mt Extra Tiger.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/My Big Campus.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/MyiCourse.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Naiku.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Ning.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Notepag.es.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Novachi.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/NovellGroupWise.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Nukeviet.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Numbas.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Nuvvo.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/OER Commons.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/OERPUB.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ORExchange.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Obsurvey.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/OmniUpdate.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Open Text FirstClass.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Open Text Social Workplace.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/OpenStudy.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/OpenTrack.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Outlook Express.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Outlook.com.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Outlook.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/PBworks.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/PHForum.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/PMathML.xsl
    .js
  • $LOCALAPPDATA/Temp/mathtype.tmp/PMathMLCSS.xsl
    .js .xml polyglot
  • $LOCALAPPDATA/Temp/mathtype.tmp/PYCC.pf
  • $LOCALAPPDATA/Temp/mathtype.tmp/Pathwright.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Penzu.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Piazza.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Plain TeX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Poll Everywhere.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Pollmo.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Postagon.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Presentation MathML input (chars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Presentation MathML input.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Prezi.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ProProfs.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ProofWiki.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Purplemath.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Question Writer HTML5.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Quia Web.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Quora.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Qute.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/RCampus.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/RStudio.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Ruzuku.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/S.O.S Math.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Scholarpedia.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/SchoolFusion.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Schoology.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Scribblar.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/SiS Survey.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Sidevibe.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/SimpleBooklet.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Skillshare.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Sklogwiki.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/SmartCloud.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Sophia.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Spruz.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/StackEdit.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-EE.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-M.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-P.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-QF.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-SA.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/StackExchange-TCS.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/StudyBlue Pro.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/StudySync.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/SurveyGizmo.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Symbol Tiger Expert.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/Symbol Tiger.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/TOPYX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TYPO3.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TalentLMS.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeX (AMS base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeX (AMS base vars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeX (AMS base).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeX (base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeX (base vars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeX (base).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeX (chars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeX Look.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeXchat.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Teachbook.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TeacherSites.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texify.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texvc (DataObject).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texvc (LaTeX delimiters).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texvc (Physics Forum).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texvc (base rules).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texvc (base vars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texvc (chars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texvc input (chars).tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texvc input.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Texvc.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/TexvcBase.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Thunderbird.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Tiger Expert.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/Tiger.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/Tiger.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/TigerExpert.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/Times+Symbol 10.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/Times+Symbol 12.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/Times+Symbol 48.eqp
  • $LOCALAPPDATA/Temp/mathtype.tmp/TinyLetter.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Top Hat.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Tumblr.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Tutorsbox.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/US_export_policy.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/UberNote.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Udacity.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Udemy.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Udutu.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/UnivTorontoMathWiki.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Vital.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Votations.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/WeCollaborate.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/WebAssign.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/WebsiteBaker.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/WiZDOM.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Wikia.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Wikibooks.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Wikidot.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Wikispaces.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Windows Live Writer.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Windows Mail.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/WindowsAccessBridge-32.dll
    .dll windows:5 windows x86 arch:x86

    84a5cfdeff1a7d1d864ed633a0c541f2


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/Winksite.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/WordPress.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/WorldWideWhiteboard.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Yahoo Contributor Network.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Yahoo Mail.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ZCubes.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Zeppelin.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Zimbra.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Zoho Discussions.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Zoho Writer.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Zotero.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/Zunal WebQuest Maker.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/access-bridge-32.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/awt.dll
    .dll windows:5 windows x86 arch:x86

    5a7c52837d7c6ebf3ea64f339d91c528


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/blacklist
  • $LOCALAPPDATA/Temp/mathtype.tmp/blacklisted.certs
  • $LOCALAPPDATA/Temp/mathtype.tmp/cacerts
  • $LOCALAPPDATA/Temp/mathtype.tmp/calendars.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/charsets.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/content-types.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/copybtn.exe
    .exe windows:4 windows x86 arch:x86

    34a493b6b42d8e3799393a3d4cd6270c


    Code Sign

    Headers

    Imports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/cueFlash.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/currency.data
  • $LOCALAPPDATA/Temp/mathtype.tmp/cursors.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/dcpr.dll
    .dll windows:5 windows x86 arch:x86

    3f4c0ab4d244ccb8bda37cbf2367a663


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/eNLVM.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/ePals.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/eQuizzer.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/eTouchSamePage.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/eTrainCenter.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/edX.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/edu2.0.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclid.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclid.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclid.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclid.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidb.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidb.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidb.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidb.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidbi.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidbi.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidbi.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidbi.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidi.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidi.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidi.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euclidi.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsym.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsym.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsym.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsym.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymb.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymb.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymb.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymb.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymbi.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymbi.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymbi.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymbi.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymi.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymi.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymi.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eucsymi.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/euextra.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euextra.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/euextra.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euextra.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/euextrab.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euextrab.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/euextrab.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/euextrab.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eufrak.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eufrak.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eufrak.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eufrak.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eufrakb.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eufrakb.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eufrakb.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eufrakb.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat1.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat1.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat1.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat1.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat1b.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat1b.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat1b.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat1b.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat2.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat2.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat2.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat2.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat2b.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat2b.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat2b.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/eumat2b.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/fences.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/fences.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/fences.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/fences.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/flavormap.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/fontconfig.bfc
  • $LOCALAPPDATA/Temp/mathtype.tmp/fontconfig.properties.src
  • $LOCALAPPDATA/Temp/mathtype.tmp/fontinfo.ini
  • $LOCALAPPDATA/Temp/mathtype.tmp/fontmanager.dll
    .dll windows:5 windows x86 arch:x86

    b154cadab576035aabe12a2a1f05f7ee


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/hijrah-config-umalqura.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/invalid32x32.gif
    .gif
  • $LOCALAPPDATA/Temp/mathtype.tmp/itslearning.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/j2pcsc.dll
    .dll windows:5 windows x86 arch:x86

    63e189e6ac3fe0e3a90b6d97282a498a


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/j2pkcs11.dll
    .dll windows:5 windows x86 arch:x86

    13312f067fe890fc2438ee0b627107eb


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/jaas_nt.dll
    .dll windows:5 windows x86 arch:x86

    f413fd6a79b734fd423e8dd71326186a


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/jabswitch.exe
    .exe windows:5 windows x86 arch:x86

    91f3d614f9b67c32a32d29abb665ae77


    Headers

    Imports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/jaccess.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/java.dll
    .dll windows:5 windows x86 arch:x86

    1e9fc85309906c2f975b78e260e6aac8


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/java.policy
  • $LOCALAPPDATA/Temp/mathtype.tmp/java.security
  • $LOCALAPPDATA/Temp/mathtype.tmp/jawt.dll
    .dll windows:5 windows x86 arch:x86

    a367813d79ce542a17d48a6d5815ae0f


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/jce.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/jmxremote.access
  • $LOCALAPPDATA/Temp/mathtype.tmp/jmxremote.password.template
  • $LOCALAPPDATA/Temp/mathtype.tmp/jpeg.dll
    .dll windows:5 windows x86 arch:x86

    6529993b931923fcd297299750abcaa4


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/jsound.dll
    .dll windows:5 windows x86 arch:x86

    3237f9f8cd3294fcb7a2350f484bd69e


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/jsoundds.dll
    .dll windows:5 windows x86 arch:x86

    75de50e9251a9d51c81e1b6ccce81c7e


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/jsse.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/jvm.cfg
  • $LOCALAPPDATA/Temp/mathtype.tmp/jvm.dll
    .dll windows:5 windows x86 arch:x86

    108bc7fbe31684a108a8feea18873ddc


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/kcms.dll
    .dll windows:5 windows x86 arch:x86

    85a4bfc561ad6ee0a2ad2529c650afa7


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/lcms.dll
    .dll windows:5 windows x86 arch:x86

    8150806bf4008bf1ff4c83f59fd9396c


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/local_policy.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/localedata.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/locales
  • $LOCALAPPDATA/Temp/mathtype.tmp/logging.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/mail.ru.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/management.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/mathpagex64.wll
    .dll regsvr32 windows:6 windows x64 arch:x64

    a778a2eec23a233f89c85cd3be45e809


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mathpagex86.wll
    .dll regsvr32 windows:6 windows x86 arch:x86

    5108a312ec3ec7bb4c5bd94f329c033f


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mathtype.ex_
    .exe windows:6 windows x86 arch:x86

    c165d946b85b6dab8273b92bb8cb5cc9


    Headers

    Imports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/meta-index
  • $LOCALAPPDATA/Temp/mathtype.tmp/mlib_image.dll
    .dll windows:5 windows x86 arch:x86

    6e21d83f5e6ff110ff2f01a63cf53a03


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswchs.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswdan.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswdeu.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswell.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswenu.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswesp.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswfra.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswjpn.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswsbn.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswuichs.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mswuienu.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mt6chs.chm
    .chm
  • $LOCALAPPDATA/Temp/mathtype.tmp/mt6enu.chm
    .chm
  • $LOCALAPPDATA/Temp/mathtype.tmp/mt6x64.dll
    .dll windows:6 windows x64 arch:x64

    afa7ac1b9e2bb6197034386f523ac3d2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mt6x86.dll
    .dll windows:6 windows x86 arch:x86

    904dcd3ad7b391819ac9db166efa4331


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mt7.dsc
  • $LOCALAPPDATA/Temp/mathtype.tmp/mt7chs.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/mtexe.ico
  • $LOCALAPPDATA/Temp/mathtype.tmp/mtextra.afm
  • $LOCALAPPDATA/Temp/mathtype.tmp/mtextra.pfb
  • $LOCALAPPDATA/Temp/mathtype.tmp/mtextra.pfm
  • $LOCALAPPDATA/Temp/mathtype.tmp/mtextra.ttf
  • $LOCALAPPDATA/Temp/mathtype.tmp/mtsu7chs.dll
    .dll windows:4 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/net.dll
    .dll windows:5 windows x86 arch:x86

    c01801e1c452a82b268f42cf3f7f44b0


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/net.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/nio.dll
    .dll windows:5 windows x86 arch:x86

    eb564a18854f63e47ba16b3957600ce5


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2002.ppa
    .ppa .doc windows office2003
  • $LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2003.ppa
    .ppa .doc windows office2003
  • $LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2007.ppam
    .ppam office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2010x64.ppam
    .ppam office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2010x86.ppam
    .ppam office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2013x64.ppam
    .ppam office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/pptcmds2013x86.ppam
    .ppam office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/psfont.properties.ja
  • $LOCALAPPDATA/Temp/mathtype.tmp/psfontj2d.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/resources.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/rootmath.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/rt.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/sNews.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/sRGB.pf
  • $LOCALAPPDATA/Temp/mathtype.tmp/setup.exe
    .exe windows:6 windows x86 arch:x86

    1a55451186605539429fa8a8df267bd1


    Headers

    Imports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/setup.inf
    .ps1
  • $LOCALAPPDATA/Temp/mathtype.tmp/setup.lib.inf
  • $LOCALAPPDATA/Temp/mathtype.tmp/snmp.acl.template
  • $LOCALAPPDATA/Temp/mathtype.tmp/sound.properties
  • $LOCALAPPDATA/Temp/mathtype.tmp/sunec.dll
    .dll windows:5 windows x86 arch:x86

    77099358e94a2792873be5852d0933b3


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/sunec.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/sunjce_provider.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/sunmscapi.dll
    .dll windows:5 windows x86 arch:x86

    c660867b9193cb19852946d8fedf1845


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/sunmscapi.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/sunpkcs11.jar
    .jar
  • $LOCALAPPDATA/Temp/mathtype.tmp/t2k.dll
    .dll windows:5 windows x86 arch:x86

    578c70223a0d8cd0361bb1078cb16ccc


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/toolbar.eql
  • $LOCALAPPDATA/Temp/mathtype.tmp/tzdb.dat
  • $LOCALAPPDATA/Temp/mathtype.tmp/tzmappings
  • $LOCALAPPDATA/Temp/mathtype.tmp/unpack.dll
    .dll windows:5 windows x86 arch:x86

    e00a0a11515768ae3f0e5532e0a925ef


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/unpack200.exe
    .exe windows:5 windows x86 arch:x86

    172861d7f771518bba27ebb10e326cd9


    Headers

    Imports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/w2k_lsa_auth.dll
    .dll windows:5 windows x86 arch:x86

    9a1ea58331d3fc0061fb1c1a3bda0e4b


    Headers

    Imports

    Exports

    Sections

  • $LOCALAPPDATA/Temp/mathtype.tmp/we+.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/webATall.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/widgEditor.tdl
  • $LOCALAPPDATA/Temp/mathtype.tmp/win32_CopyDrop32x32.gif
    .gif
  • $LOCALAPPDATA/Temp/mathtype.tmp/win32_CopyNoDrop32x32.gif
    .gif
  • $LOCALAPPDATA/Temp/mathtype.tmp/win32_LinkDrop32x32.gif
    .gif
  • $LOCALAPPDATA/Temp/mathtype.tmp/win32_LinkNoDrop32x32.gif
    .gif
  • $LOCALAPPDATA/Temp/mathtype.tmp/win32_MoveDrop32x32.gif
    .gif
  • $LOCALAPPDATA/Temp/mathtype.tmp/win32_MoveNoDrop32x32.gif
    .gif
  • $LOCALAPPDATA/Temp/mathtype.tmp/wordcmdsx64.dot
    .doc .dot windows office2003
  • $LOCALAPPDATA/Temp/mathtype.tmp/wordcmdsx86.dot
    .doc .dot windows office2003
  • $LOCALAPPDATA/Temp/mathtype.tmp/wordui2002.dot
    .doc .dot windows office2003

    ThisDocument

    Module1

    AssertDlg

    Asserts

    AutoExec

    Declarations

    Declarations32

    MTLibCommon

    Registry

    Registry32

    Preferences

    UILib

    UIWrappers

    UIWrappers2003

    UIHelp

    UIEnableDisable

    UIEnableDisable2007

    MTW5

    CallbackGuard

    CommandGuard

    AutoExecCls

    UIHelpCls

    UILibCls

    UIWrappersCls

    UIRibbonCls

  • $LOCALAPPDATA/Temp/mathtype.tmp/wordui2003.dot
    .doc .dot windows office2003

    ThisDocument

    Module1

    AssertDlg

    Asserts

    AutoExec

    Declarations

    Declarations32

    MTLibCommon

    Registry

    Registry32

    Preferences

    UILib

    UIWrappers

    UIWrappers2003

    UIHelp

    UIEnableDisable

    UIEnableDisable2007

    MTW5

    CallbackGuard

    CommandGuard

    AutoExecCls

    UIHelpCls

    UILibCls

    UIWrappersCls

    UIRibbonCls

  • $LOCALAPPDATA/Temp/mathtype.tmp/wordui2007.dotm
    .dotm office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/wordui2010x64.dotm
    .dotm office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/wordui2010x86.dotm
    .dotm office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/wordui2013x64.dotm
    .dotm office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/wordui2013x86.dotm
    .dotm office2007
  • $LOCALAPPDATA/Temp/mathtype.tmp/zip.dll
    .dll windows:5 windows x86 arch:x86

    1ccb1757f0a4ba69a2441ed91be21207


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    509a34b3a68a773e0afb4259e68f9f82


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    68b7023f8923dd087549802f8fa631c3


    Headers

    Imports

    Exports

    Sections

  • MathType_v7.x_Patch.exe
    .exe windows:5 windows x86 arch:x86

    dc73a9bd8de0fd640549c85ac4089b87


    Headers

    Imports

    Sections

  • ReadMe.txt
  • 喜欢的话请KK喝瓶水吧.png
    .png
    • http://pay.tbma.com.cn/168704656

  • 破解说明.txt